CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
77554 | CVE-2015-0291 | Candidate | The sigalgs implementation in t1_lib.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by using an invalid signature_algorithms extension in the ClientHello message during a renegotiation. | Assigned (20141118) | None (candidate not yet proposed) | View | |
12274 | CVE-2005-1068 | Candidate | Cross-site scripting (XSS) vulnerability in sCssBoard 1.11 and earlier allows remote attackers to execute arbitrary Javascript via [url] tags. | Assigned (20050412) | None (candidate not yet proposed) | View | |
77810 | CVE-2015-0547 | Candidate | The D2CenterstageService.getComments service method in EMC Documentum D2 4.1 and 4.2 before 4.2 P16 and 4.5 before P03 allows remote authenticated users to conduct Documentum Query Language (DQL) injection attacks and bypass intended read-access restrictions via unspecified vectors. | Assigned (20141217) | None (candidate not yet proposed) | View | |
12530 | CVE-2005-1324 | Candidate | Multiple cross-site scripting (XSS) vulnerabilities in index.php for phpMyVisites allow remote attackers to inject arbitrary web script or HTML via the (1) part, (2) per, or (3) site parameters. | Assigned (20050427) | None (candidate not yet proposed) | View | |
78066 | CVE-2015-0803 | Candidate | The HTMLSourceElement::AfterSetAttr function in Mozilla Firefox before 37.0 does not properly constrain the original data type of a casted value during the setting of a SOURCE element"s attributes, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via a crafted HTML document. | Assigned (20150107) | None (candidate not yet proposed) | View |
Page 19236 of 20943, showing 5 records out of 104715 total, starting on record 96176, ending on 96180